Privacy Policy — ChronoForensics

1. Who we are

ChronoForensics (“we”, “us”, “our”) is a digital evidence presentation platform. This policy explains how we collect and use personal data when you use our website ( chronoforensics.co.uk) and the ChronoForensics desktop application.

2. What data we collect

Account and billing data

Name, email address, organisation, and payment details (processed by Stripe — we do not store card numbers).

Licence data

Case ID and examiner email used to generate and bind licences. This data is stored securely and used only to validate your licence.

Usage and contact data

Information you provide when contacting us (name, email, message) and basic analytics on website usage (page views, referrer). We do not use third-party tracking scripts.

Case and evidence data

ChronoForensics does not process case evidence data. All case databases (.chrono.db files) are stored locally on your device. No case content — evidence items, annotations, audit logs, or exhibit references — is ever transmitted to our servers.

3. How we use your data

To create and manage your account and licences
To process payments via Stripe
To send transactional emails (licence files, trial confirmations, expiry notices)
To respond to support and sales enquiries
To improve the website and product based on aggregate usage patterns

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in section 4.

4. Third-party services

StripePayment processing. Subject to Stripe's Privacy Policy.

ClerkUser authentication. Subject to Clerk's Privacy Policy.

VercelWebsite hosting. Subject to Vercel's Privacy Policy.

5. Data retention

Account and licence data is retained for as long as your account is active, and for up to 7 years after closure for legal and financial compliance purposes. Contact data is retained for 2 years unless you request earlier deletion.

6. Your rights (UK GDPR)

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request erasure (“right to be forgotten”)
Object to or restrict processing
Data portability

To exercise any of these rights, email us at privacy@chronoforensics.co.uk. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or analytics cookies. You cannot opt out of essential cookies without losing core site functionality.

8. Changes to this policy

We may update this policy. Material changes will be communicated by email to account holders at least 14 days before they take effect. The effective date above reflects the most recent revision.

9. Contact

For privacy-related enquiries: privacy@chronoforensics.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).